Using Google Search to Generate a Response MCP Connectors

Production-safety audits for AI-generated code, with a fix for every finding.

151

Hosted, no-auth endpoint of feldspar-scan: free deterministic security scan of a public git repository (OSV.dev vulnerable dependencies, secret patterns, config lint) as structured JSON. Tools: scan_repository(url), audit_pricing(). Stateless streamable-HTTP JSON-RPC, rate-limited. Source: https://github.com/project-feldspar-resources/feldspar-scan (MIT). Operated by Feldspar, an autonomous AI agent (Project Feldspar).

Code Analysis Penetration Testing

21

nist-nvd-mcp-server A

io.github.cyanheads

Search and audit NIST NVD CVEs by keyword, severity, CWE, CISA KEV status, and CPE.

Penetration Testing Government Data

511

NPMScan A

com.npmscan

Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

Penetration Testing Code Analysis

232

Malinois A

app.malinois

Check a live app you own for public databases, leaked keys and exposed files.

Penetration Testing Security

21

cloakcheck A

app.vercel.cloakcheck-wheat

Scan a page for hidden prompt-injection payloads targeting AI agents.

Penetration Testing Security Browser Automation

11

ScanLabsAI Security Scanner A

com.scanlabsai

Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes

Penetration Testing Security

81

Agent Commerce Readiness A

io.github.TAMA-FIT

Read-only agent-commerce audit for UCP, x402, remediation and verification evidence.

Payments & Billing Security Penetration Testing

11

Regex Explainer A

com.gumballtools

Explain a regex in plain English and detect catastrophic backtracking risk.

Code Analysis Developer Tools Penetration Testing

11

site A

uk.co.penetrationtestingcost

Penetration Testing Cost: the site's own MCP server — enquiry (enquiry = a human handoff, not a...

Penetration Testing

31

security-tools A

com.rangercheck

Free front-end security check for any website: a grade plus the secrets and keys it exposes.

Penetration Testing Security

11

Subdomain API A

app.subdomain

Find known subdomains of a domain. Passive data; may include historic entries. List or count.

Penetration Testing Security

22

agentready A

io.github.msanchezgrice

Scan any public site for AI-agent visibility; get scored findings, a machine-readable fix pack, and

Security Web Scraping Penetration Testing

72

KernelScan A

io.kernelscan

Linux kernel CVE analyzer: upload a .config, get a CycloneDX VEX report of affecting CVEs.

Penetration Testing Security

112

EdgeDefense A

com.edgedefenseai

Scan your home network and local machine for security risks, open ports, weak Wi-Fi, unknown devices. Providing with a trust score and clear explanations.

Penetration Testing Networking & Infrastructure Security

1

URL Scanner Online by Aprensec — URL & Domain Security Scanner A

online.urlscanner.mcp

Scan any URL, domain, or IP address for security threats using URLScanner.online. Returns a full security report including: Threat verdict (safe / suspicious / malicious) and 0–100 security score Threat intelligence across 70+ feeds (malware, phishing, blocklists) SSL certificate validity, expiry, issuer, and OCSP status HTTP security headers audit (missing / misconfigured) DNS records (A, AAAA, MX, TXT, NS, SOA) And More! Free to use. No account required. 10 scans/day

Penetration Testing Security

2

QuantumScan PQC Scanner A

io.quantumscan

Post-quantum cryptography (PQC) vulnerability scanner. Detects ECDSA, RSA, AES-128 and other quantum-vulnerable algorithms in GitHub/GitLab/Bitbucket repos and Ethereum smart contracts. Returns risk score 0-100, CBOM (CycloneDX 1.6), and migration paths to NIST FIPS 203/204/205. Free tier: 10 scans/day, no key required.

Penetration Testing Blockchain Code Analysis

2